BLUE-SPY

BLUE-SPY - Fast Pair 脆弱性調査ツール セキュリティ免責事項と法的警告 ⚠️ 本ソフトウェアは、認可されたセキュリティ研究および倫理的なテストのみを目的としています。⚠️ このツールを、あなたが所有していない、または明示的な書面による許可を得ていないデバイスに対して不正に使用することは 違法 であり、以下の結果を招く可能性があります。 世界各国のコンピュータ詐欺および不正使用防止法（CFAA）および類似の法律に基づく刑事訴追 プライバシー侵害および不正アクセスに対する民事訴訟 盗聴罪 重大な法的・金銭的制裁...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

EUVD-2026-72612

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...

SUSE CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

SUSE CVE-2026-19931

A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...

PT-2026-87167

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. An unauthenticated client with network access to a router port...

CVE-2026-86673: Use of Hard-coded Credentials

A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqliconnect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The...

PT-2026-86974

Name of the Vulnerable Software and Affected Versions ASUS Control Center Express Agent affected versions not specified Description Missing authentication for a critical function allows an unauthenticated nearby user to achieve remote code execution and control the host via a direct connection to...

PT-2026-87077

An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned...

PT-2026-87881

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

CVE-2026-72964: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...

CVE-2026-69331: Use After Free

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-68886: Use After Free

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally...

CVE-2026-72983: Use After Free

Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...

CVE-2026-72926: Use After Free

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

CVE-2026-71333: Use After Free

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69455: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

PT-2026-87372

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

PT-2026-87300

Name of the Vulnerable Software and Affected Versions Windows Network Connection Broker affected versions not specified Description A use after free issue exists in the Windows Network Connection Broker. This allows an authorized attacker to disclose sensitive information locally and affect the...